Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

80.324exploits catalogados
37.130CVEs com exploração pública
24.695testados em laboratório
24.476 exploits
Exploit-DB
Netsweeper 2.6.29.8 - SQL Injection
CVE-2014-9613webappsphp21 ago 2015
Multiple SQL injection vulnerabilities in Netsweeper before 2.6.29.10 allow remote attackers to execute arbitrary SQL co
23RISCO
abrir
Exploit-DBVexDay Proof
Microsoft Windows - 'win32k.sys' TTF Font Processing IUP[] Program Instruction Pool-Based Buffer Overflow
CVE-2015-2455doswindows21 ago 2015
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2
35RISCO
abrir
Exploit-DBVexDay Proof
Mozilla - Maintenance Service Log File Overwrite Privilege Escalation
CVE-2015-4481localwindows21 ago 2015
Race condition in the Mozilla Maintenance Service in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 on Win
23RISCO
abrir
Exploit-DBVexDay Proof
Microsoft Windows - 'ATMFD.DLL' Out-of-Bounds Read Due to Malformed FDSelect Offset in the CFF Table
CVE-2015-2462doswindows21 ago 2015
ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,
35RISCO
abrir
Exploit-DBVexDay Proof
Microsoft Windows - 'ATMFD.DLL' Out-of-Bounds Read Due to Malformed Name INDEX in the CFF Table
CVE-2015-2461doswindows21 ago 2015
ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,
35RISCO
abrir
Exploit-DBVexDay Proof
Konica Minolta FTP Utility 1.0 - Remote Denial of Service (PoC)
CVE-2015-7767doswindows21 ago 2015
Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code or cause a denial of
23RISCO
abrir
Exploit-DB
Netsweeper 4.0.8 - Arbitrary File Upload / Execution
CVE-2014-9619webappsphp21 ago 2015
Unrestricted file upload vulnerability in webadmin/ajaxfilemanager/ajaxfilemanager.php in Netsweeper before 3.1.10, 4.0.
23RISCO
abrir
Exploit-DBVexDay Proof
Microsoft Windows - 'win32k.sys' TTF Font Processing win32k!fsc_BLTHoriz Out-of-Bounds Pool Write
CVE-2015-2464doswindows21 ago 2015
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2
35RISCO
abrir
Exploit-DB
Netsweeper 4.0.8 - Authentication Bypass (via New Profile Creation)
CVE-2014-9618webappsphp21 ago 2015
The Client Filter Admin portal in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote att
60RISCO
abrir
Exploit-DBVexDay Proof
Microsoft Office 2007 - 'OGL.dll' DpOutputSpanStretch::OutputSpan Out of Bounds Write (MS15-080)
CVE-2015-2431doswindows21 ago 2015
Microsoft Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, and Lyn
28RISCO
abrir
Exploit-DB
Netsweeper 4.0.8 - SQL Injection / Authentication Bypass
CVE-2014-9605webappsphp21 ago 2015
WebUpgrade in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass aut
23RISCO
abrir
Exploit-DBVexDay Proof
Microsoft Windows - 'ATMFD.dll' CFF table (ATMFD+0x3440b / ATMFD+0x3440e) Invalid Memory Access
CVE-2015-2460doswindows21 ago 2015
ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,
35RISCO
abrir
Exploit-DBVexDay Proof
Microsoft Office 2007 - MSPTLS Heap Index Integer Underflow (MS15-081)
CVE-2015-2470doswindows21 ago 2015
Integer underflow in Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office for Mac 201
28RISCO
abrir
Exploit-DBVexDay Proof
Microsoft Windows - 'ATMFD.dll' CharString Stream Out-of-Bounds Reads (MS15-021)
CVE-2015-2458doswindows21 ago 2015
ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,
35RISCO
abrir
Exploit-DBVexDay Proof
Microsoft Windows - 'win32k.sys' TTF Font Processing win32k!scl_ApplyTranslation Pool-Based Buffer Overflow
CVE-2015-2456doswindows21 ago 2015
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2
35RISCO
abrir
Exploit-DB
Netsweeper 4.0.4 - SQL Injection
CVE-2014-9612webappsphp21 ago 2015
SQL injection vulnerability in remotereporter/load_logfiles.php in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1
23RISCO
abrir
Exploit-DB
Aruba Mobility Controller 6.4.2.8 - Multiple Vulnerabilities
CVE-2015-5437webappsxml20 ago 2015
20RISCO
abrir
Exploit-DBVexDay Proof
Adobe Flash - swapDepths Use-After-Free
CVE-2015-5550dosmultiple19 ago 2015
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linu
35RISCO
abrir
Exploit-DBVexDay Proof
Adobe Flash - XMLSocket Destructor Not Cleared Before Setting User Data in connect
CVE-2015-5554doslinux_x86-6419 ago 2015
Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199,
35RISCO
abrir
Exploit-DBVexDay Proof
Adobe Flash - Setting Value Use-After-Free
CVE-2015-5539dosmultiple19 ago 2015
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linu
35RISCO
abrir
Exploit-DBVexDay Proof
Adobe Flash AS2 - textfield.filters Use-After-Free (2)
CVE-2015-3118doswindows19 ago 2015
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows
35RISCO
abrir
Exploit-DBVexDay Proof
Adobe Flash - Pointer Crash in Drawing and Bitmap Handling
CVE-2015-5544doslinux19 ago 2015
Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199,
35RISCO
abrir
Exploit-DBVexDay Proof
Flash Broker-Based - Sandbox Escape via Unexpected Directory Lock
CVE-2015-3083remotewindows19 ago 2015
Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460
35RISCO
abrir
Exploit-DBVexDay Proof
Adobe Flash - FileReference Class Type Confusion
CVE-2015-5558dosmultiple19 ago 2015
Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199,
35RISCO
abrir
Exploit-DBVexDay Proof
Adobe Flash - createTextField Use-After-Free
CVE-2015-5556dosmultiple19 ago 2015
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linu
35RISCO
abrir
Exploit-DBVexDay Proof
Adobe Flash - Bad Write in XML When Callback Modifies XML Tree During Property Delete
CVE-2015-5549dosmultiple19 ago 2015
Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199,
35RISCO
abrir
Exploit-DBVexDay Proof
Adobe Flash - Heap Buffer Overflow Loading '.FLV' File with Nellymoser Audio Codec
CVE-2015-4432doslinux_x86-6419 ago 2015
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows an
35RISCO
abrir
Exploit-DBVexDay Proof
Adobe Flash - 'Setting' Use-After-Free
CVE-2015-5134dosmultiple19 ago 2015
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linu
35RISCO
abrir
Exploit-DBVexDay Proof
Adobe Flash - '.SWF' Out-of-Bounds Memory Read (1)
CVE-2015-5131doswindows19 ago 2015
Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR
35RISCO
abrir
Exploit-DBVexDay Proof
Adobe Flash AS2 - DisplacementMapFilter.mapBitmap Use-After-Free (2)
CVE-2015-5127doswindows19 ago 2015
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linu
35RISCO
abrir
anteriorpágina 187 / 816próximo

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.